add session middleware test